Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier: umQkprUJBpvSa8gifFKMfshrraIcZnWdCX+JggyrDCU=
Subject key identifier: EA:8A:5D:F9:7D:C5:21:3F:07:2D:50:72:91:6F:91:12:2A:EE:D6:6D
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 01A1DD94BF591C9F869FDF247BA8C2AF8175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 05:01:15 +0000
Manifest this update: Sun 15 Nov 2026 05:01:15 +0000
Manifest next update: Mon 16 Nov 2026 05:01:15 +0000
Files and hashes: 1: Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa (hash: 3uzaIFxXEFFxlqJhGt+PM/l/uaNGyKXUk1SwVD4qq1o=)
2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: hiqGzWRO+BX5L3ymquKRPp772IT/MsQdvzqVlv4Me9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:bf:59:1c:9f:86:9f:df:24:7b:a8:c2:af:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Nov 15 05:01:15 2026 GMT
Not After : Nov 16 05:01:15 2026 GMT
Subject: CN=ea8a5df97dc5213f072d5072916f91122aeed66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:2a:dd:bc:53:f9:05:21:1e:e5:e5:14:5d:
37:69:3b:43:66:60:a4:86:8e:81:00:54:b1:38:07:
d7:75:2b:7f:3c:6c:4b:6a:16:cf:6a:53:4b:b0:36:
41:cb:ec:b9:b5:24:e5:94:98:ce:0c:51:de:80:00:
4e:85:39:be:5d:29:51:dd:77:e3:26:b5:f4:2a:ca:
d1:3f:7d:5d:01:47:4b:aa:3b:02:44:f4:f3:a6:7e:
6a:47:d1:a2:ce:70:54:54:37:4a:9d:8f:f2:35:e2:
50:8e:2c:8d:ce:a3:93:6e:30:f5:75:c6:24:83:0a:
28:f0:93:b1:7a:34:7d:d8:31:09:84:a1:bc:18:10:
d5:ee:a7:80:07:46:42:ea:2c:94:e3:25:f8:d8:fc:
38:a4:35:04:bd:bc:35:a5:02:60:79:39:7b:93:d0:
04:82:a2:a0:ac:45:43:b8:91:9e:28:9e:bc:5e:4d:
da:1a:de:bf:a7:a2:7d:d5:ff:bf:5e:c4:8c:65:1e:
30:d9:e5:f9:05:f0:27:8f:10:c9:2e:e8:dd:b8:32:
3c:e7:0a:4a:70:f9:d6:d2:91:26:41:24:eb:df:1d:
9f:68:77:6e:d4:a0:1f:b5:dc:f3:42:43:bb:10:07:
d3:82:c5:db:84:da:82:55:00:d0:d7:a3:d5:36:4e:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:5D:F9:7D:C5:21:3F:07:2D:50:72:91:6F:91:12:2A:EE:D6:6D
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3e:73:a9:90:94:02:0b:bd:d4:77:e6:f9:10:7a:03:ec:da:
76:10:7a:29:54:5e:a5:40:60:2f:f5:70:a2:18:8e:59:5c:f1:
b9:bf:63:99:96:1f:a8:5d:ac:9d:f0:4d:2b:33:84:d0:0a:82:
1c:79:89:c5:6d:f7:9b:ae:a8:63:96:4d:a9:36:5e:4b:4c:80:
3e:8f:34:c4:9e:61:d2:2c:32:8d:dd:61:82:e7:de:83:47:65:
3f:64:95:02:f4:dd:34:25:b7:38:40:0e:78:71:7e:b0:68:0a:
5a:66:8b:95:99:17:b7:cb:48:f7:bd:88:19:74:df:39:bf:f8:
2d:82:36:0f:39:3f:47:a7:04:7e:08:f7:78:26:c0:a9:fb:99:
4b:ec:41:26:25:71:d2:46:07:63:1d:9a:26:ed:3b:8e:0b:fa:
64:a9:8a:43:26:7b:61:e0:7a:a1:c2:b6:1f:30:4c:c6:33:d1:
3f:5c:de:77:25:1a:db:ca:a8:dd:a5:46:ed:3c:88:bf:1e:bf:
17:86:c4:77:e5:76:1e:11:30:ec:ce:bd:9e:ab:1a:2f:cf:bd:
8d:b2:11:ca:20:8d:8f:eb:0d:3d:b9:e2:78:f7:17:9d:35:d6:
6a:29:b5:22:d2:cb:ee:e4:1f:fa:2f:d3:80:d1:28:ee:90:c5:
e9:0d:a7:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlL9ZHJ+Gn98ke6jCr4F1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw
NTFjMDUwHhcNMjYxMTE1MDUwMTE1WhcNMjYxMTE2MDUwMTE1WjAzMTEwLwYDVQQD
EyhlYThhNWRmOTdkYzUyMTNmMDcyZDUwNzI5MTZmOTExMjJhZWVkNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApykq3bxT+QUhHuXlFF03aTtDZmCk
ho6BAFSxOAfXdSt/PGxLahbPalNLsDZBy+y5tSTllJjODFHegABOhTm+XSlR3Xfj
JrX0KsrRP31dAUdLqjsCRPTzpn5qR9GiznBUVDdKnY/yNeJQjiyNzqOTbjD1dcYk
gwoo8JOxejR92DEJhKG8GBDV7qeAB0ZC6iyU4yX42Pw4pDUEvbw1pQJgeTl7k9AE
gqKgrEVDuJGeKJ68Xk3aGt6/p6J91f+/XsSMZR4w2eX5BfAnjxDJLujduDI85wpK
cPnW0pEmQSTr3x2faHdu1KAftdzzQkO7EAfTgsXbhNqCVQDQ16PVNk4d0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqKXfl9xSE/By1QcpFvkRIq7tZtMB8GA1UdIwQY
MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt
MDE0YzcwOTc3ZDQ5LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5
LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz5zqZCU
Agu91Hfm+RB6A+zadhB6KVRepUBgL/VwohiOWVzxub9jmZYfqF2snfBNKzOE0AqC
HHmJxW33m66oY5ZNqTZeS0yAPo80xJ5h0iwyjd1hgufeg0dlP2SVAvTdNCW3OEAO
eHF+sGgKWmaLlZkXt8tI972IGXTfOb/4LYI2Dzk/R6cEfgj3eCbAqfuZS+xBJiVx
0kYHYx2aJu07jgv6ZKmKQyZ7YeB6ocK2HzBMxjPRP1zedyUa28qo3aVG7TyIvx6/
F4bEd+V2HhEw7M69nqsaL8+9jbIRyiCNj+sNPbniePcXnTXWaim1ItLL7uQf+i/T
gNEo7pDF6Q2nHA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:39 2026 by rpki-client